General
- Target nullnet.arm7.elf
- Size 97KB
- Sample260720-xv7slscw8n
- SHA256 46aa346da774ba70930dbcde4c35b53f8e308301306b2312000ebcdf592a315b
- MD5 1ebf89fcedc24b4fd4bf44c1c7555551
- SHA1 4e9312139bfe9d671374ff8f946e25655c755a01
- SHA512 848bbc66c82c18a12e53492ce52e21659abab7f62dca56610d35cefc1a1351c8f646f2af783154a8c5ddc8530498af04988c297d5dc759d18c959edbafddec20
- SSDEEP 3072:p1DWd3AEdzwOwcauQJFzKRA6QPC+7ZgW:vWJAEdzwOwHZJFzKRA3CBW
- TLSH T11AA3F785B9829F11C5C626BBFE5F014D3317BBE8E3EE7212DC245F9033CA59A0E66512
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
nullnet.arm7.elf
Resource
debian12-armhf-20260127-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target nullnet.arm7.elf
- Size 97KB
- SHA256 46aa346da774ba70930dbcde4c35b53f8e308301306b2312000ebcdf592a315b
- MD5 1ebf89fcedc24b4fd4bf44c1c7555551
- SHA1 4e9312139bfe9d671374ff8f946e25655c755a01
- SHA512 848bbc66c82c18a12e53492ce52e21659abab7f62dca56610d35cefc1a1351c8f646f2af783154a8c5ddc8530498af04988c297d5dc759d18c959edbafddec20
- SSDEEP 3072:p1DWd3AEdzwOwcauQJFzKRA6QPC+7ZgW:vWJAEdzwOwHZJFzKRA3CBW
- TLSH T11AA3F785B9829F11C5C626BBFE5F014D3317BBE8E3EE7212DC245F9033CA59A0E66512
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.